feat(server): 票据增强闭环（F9/F10/F11/F12/F13/F28）

- /invoice-pool 新增 unbind、PATCH 修正、manual archive、OCR retry、判重例外 override（含 VALID_004/006/007）

- signed-url 签发/下载写入审计日志（脱敏 extra）

- 新增未绑定票据自动归档作业 + 一次性执行脚本

- 回归脚本增强：workflow-actions/dedup/audit/ocr 覆盖上述场景；v3 CSV 状态推进至 DONE

server/src/config.js

@@ -69,6 +69,10 @@ function getConfig() {
     ocrMaxAttempts: Number(process.env.OCR_MAX_ATTEMPTS ?? 3),
     ocrTimeoutMs: Number(process.env.OCR_TIMEOUT_MS ?? 5000),
 
+    invoiceArchiveCron: process.env.INVOICE_ARCHIVE_CRON ?? "30 2 * * *",
+    invoiceArchiveUnusedDays: Number(process.env.INVOICE_ARCHIVE_UNUSED_DAYS ?? 90),
+    invoiceArchiveBatchSize: Number(process.env.INVOICE_ARCHIVE_BATCH_SIZE ?? 200),
+
     tencentSecretId: process.env.TENCENT_SECRET_ID ?? "",
     tencentSecretKey: process.env.TENCENT_SECRET_KEY ?? "",
     tencentOcrRegion: process.env.TENCENT_OCR_REGION ?? "ap-beijing",